Add device enrollment API and agent protocol

Expose ITAM REST endpoints for agents, console GraphQL for device
management, and wire probod bootstrap with enrollment e2e coverage.

Signed-off-by: Ludovic Vielle <ludovic@probo.com>

pkg/bootstrap/builder.go

@@ -155,6 +155,12 @@ func (b *Builder) Build() (*probodconfig.FullConfig, error) {
 					),
 				},
 			},
+			ITAM: probodconfig.ITAMConfig{
+				DeviceEnrollmentTokenValidity: b.resolver.getEnvIntOrDefault(
+					"PROBOD_ITAM_DEVICE_ENROLLMENT_TOKEN_VALIDITY",
+					604800,
+				),
+			},
 			CompliancePortal: probodconfig.CompliancePortalConfig{
 				HTTPAddr:   b.resolver.getEnv("PROBOD_TRUST_CENTER_HTTP_ADDR"),
 				HTTPSAddr:  b.resolver.getEnv("PROBOD_TRUST_CENTER_HTTPS_ADDR"),

pkg/bootstrap/builder_test.go

@@ -187,6 +187,9 @@ func TestBuilder_Build_Defaults(t *testing.T) {
 	assert.Equal(t, 60, cfg.Probod.Auth.SAML.DomainVerificationIntervalSeconds)
 	assert.Empty(t, cfg.Probod.Auth.SAML.DomainVerificationResolverAddr)
 
+	// ITAM config
+	assert.Equal(t, 604800, cfg.Probod.ITAM.DeviceEnrollmentTokenValidity)
+
 	// Trust center config
 	assert.Empty(t, cfg.Probod.CompliancePortal.HTTPAddr)
 	assert.Empty(t, cfg.Probod.CompliancePortal.HTTPSAddr)